#!


###########################
# WebFilter Settings Profile
###########################
#
# Settings provide the config for "https scanning without deep scan"
#
config webfilter profile
edit mydomain1-default.local
set comment "Webfilter default profile mydomain1.ch"
set replacemsg-group ''
set inspection-mode proxy
set options block-invalid-url
set https-replacemsg disable
unset ovrd-perm
set post-action normal
config override
set ovrd-cookie deny
set ovrd-scope user
set profile-type list
set ovrd-dur-mode constant
set ovrd-dur 1d2h3m
end
config web
set bword-threshold 10
unset bword-table
unset urlfilter-table
unset content-header-list
set blacklist disable
unset whitelist
set safe-search url header
set youtube-restrict none
set log-search enable
end
config ftgd-wf
set options error-allow http-err-detail rate-server-ip redir-block
set category-override g01 g02 g04 g05 g06 g07 g21 143 141 142
set exempt-quota 17
unset ovrd
set max-quota-timeout 300
set rate-image-urls enable
set rate-javascript-urls enable
set rate-css-urls enable
set rate-crl-urls enable
end
set wisp disable
set log-all-url enable
set web-content-log enable
set web-filter-activex-log enable
set web-filter-command-block-log enable
set web-filter-cookie-log enable
set web-filter-applet-log enable
set web-filter-jscript-log enable
set web-filter-js-log enable
set web-filter-vbs-log enable
set web-filter-unknown-log enable
set web-filter-referer-log enable
set web-filter-cookie-removal-log enable
set web-url-log enable
set web-invalid-domain-log enable
set web-ftgd-err-log enable
set web-ftgd-quota-usage enable
    next
end
###########################
# WebFilter Settings Content Header
###########################
config webfilter content-header
edit 1
set comment "exempt from antivirus scanning"
config entries
edit "video\\/.*"
set action exempt
next
edit "audio\\/.*"
set action exempt
next
end
set name "exempt-antivirus-scanning"
next
end

config webfilter profile
edit mydomain1-default.local
config web
set content-header-list 1
end
next
end

###########################
# WebFilter Settings URL Filter
###########################
config webfilter urlfilter
edit 1
set name "mydomain1-default.local"
set comment "URL Filter default profile mydomain1.ch"
config entries
edit 1
set url "*.apple.com"
set type wildcard
#set type simple
set action exempt
#set exempt av web-content activex-java-cookie dlp fortiguard range-block all
unset referrer-host
next
edit 2
set url "*.itunes.apple.com"
set type wildcard
#set type simple
set action exempt
#set exempt av web-content activex-java-cookie dlp fortiguard range-block all
unset referrer-host
next
edit 3
set url "*.phobos.apple.com"
set type wildcard
#set type simple
set action exempt
#set exempt av web-content activex-java-cookie dlp fortiguard range-block all
unset referrer-host
next
edit 4
set url "*.apple.com.edgesuite.net"
set type wildcard
#set type simple
set action exempt
#set exempt av web-content activex-java-cookie dlp fortiguard range-block all
unset referrer-host
next
edit 5
set url "*.windowsupdate.com"
set type wildcard
#set type simple
set action exempt
#set exempt av web-content activex-java-cookie dlp fortiguard range-block all
unset referrer-host
next
edit 6
set url "*.download.windowsupdate.com"
set type wildcard
#set type simple
set action exempt
#set exempt av web-content activex-java-cookie dlp fortiguard range-block all
unset referrer-host
next
edit 7
set url "*.stats.update.microsoft.com"
set type wildcard
#set type simple
set action exempt
#set exempt av web-content activex-java-cookie dlp fortiguard range-block all
unset referrer-host
next
edit 8
set url "*.msftncsi.com"
set type wildcard
#set type simple
set action exempt
#set exempt av web-content activex-java-cookie dlp fortiguard range-block all
unset referrer-host
next
edit 9
set url "*.microsoft.com"
set type wildcard
#set type simple
set action exempt
#set exempt av web-content activex-java-cookie dlp fortiguard range-block all
unset referrer-host
next
end
next
end

config webfilter profile
edit mydomain1-default.local
config web
set urlfilter-table 1
end
next
end